It's up to the developer to decide what it means when an user's account has been overspent. The API will just return a 402. They don't have to disable service for that 402.